Skip to content
OpenAdvisories

Vendor

Thinkphp

1 known vulnerabilities.

Products

ThinkPHP 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2018-25270

    ThinkPHP 5.0.23 Remote Code Execution via invokefunction

    ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing parameter. Attackers can craft requests to the index.php endpoint with malicious funct…

    Thinkphp ThinkPHP